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Electronic Circuit with Energy Control 

BACKGROUND OF THE INVENTION 

5 i. Field of the In vention 

The present invention relates to electronic circuits with a 
controller and, in particular, to controlling the controller 
in these electronic circuits. 
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2. Description of t he Prior Art 

With the increasingly widespread use of cashless payment 
transactions, electronic data transmission via public 
networks, and the exchange of credit card numbers via publ.c 
networks, there is an increasing need for cryptography 
algorithms so as to be able to implement digital signatures, 
authentications or encryption tasks. Known cryptography 
algorithms include asymmetrical encryption algorithms, such 
as the RSA algorithm, or methods based on elliptic curves, or 
symmetrical encryption methods, such as encryption methods ,n 
accordance with the DES or AES standards. 

To be able to execute the calculations prescribed by the 
cryptography algorithms at an acceptable speed in every-day 
life, specifically provided cryptography controllers are 
employed. Such cryptography controllers are used, for 
example, in chip cards, such as, e.g., SIM cards or signature 
cards, for example for effecting payment using the mobile 
phone, for home banking transactions or legally binding 
electronic signatures. Alternatively, cryptography . 
controllers are used in computers or servers as security ICs 
so as to carry out an authentication or to be able to perform 
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encryption tasKa, which may be comprised, for —pi*, of 
securely transmitting credit card numbers, tra^tt. . 
malls of secret contents and of secure cashless payment 
transactions via the Internet. 

Th e requirements placed upon cryptography controllers are 
ending, so tnat same meet the users' nigh expectations and 
can establish themselves on the market . So as to be able 
ensure algorithmic security with regard to attach from 
outside, cryptography controllers must provide, for example, 
considerable computing power. The reason for this is that the 
security of cryptographic algorithms, such as, for example 
the known RSR algorithm, in general crucially depends on the 
bit length of the key used and that, consequently, those 
cryptography controllers executing the corresponding 
cryptography algorithms must be able to deal with figures cf 
as long a length as possible. In the RSA algorithms, for 
example, key bit lengths of 1024 bits or up to 2048 bits have 
prevailed, whereas current general-purpose processors, in 

**-t~ q ^P-bit or, as a maximum, 64-bit 

comparison, work with 8-bit, n Dit o^, 

figures - 

in addition, cryptography controllers must have a high 
computing power so as to be able to carry out the 
calculations required for the respective cryptographic 
a lgorithm within an appropriate amount of time. It would be, 
for example, too much to ask of any user to have to wait 
several minutes for an authentication check or a payment 
transaction. To be able to achieve these high computing 
powers, known cryptography controllers process in parallel 
many of the computing operations to be carried out so as to 
increase the computing speed- 



m using cryptography controllers in chip cards, such as SIM 
cards or stature cards, an additional problem results fro. 
th reprint that same must - P-^ihle at low cost as a 
:1s pLuct. Sven though the y must execute, 
a time period as possible, algorithms requrrxng a large 
computation effort, the electronic circuit, on the other 
hand, must not be too complicated and, as a consequence, 
expensive . 

A further problem in designing cryptography controllers 
results from the co-existance of many common cryptography 
eloorithms. Xn the case of a chip card, for example, that 
cryptography controller which is capable of implementing most 
standard cryptography algorithms and which, consequently, 
exhibits broad-range serviceability and a high amount of user 
friendliness, will prevail on the marker. Such a "multi- 
functional" cryptography controller prevents a user, for 
example, from having to carry several chip cards around wrth 
him/her, of which each is intended for a specific application 
or for a specific cryptography procedure. On the grounds of 
multi-purpose employment, such a multi-functional 
cryptography controller, however, must be capable of 
performing a multitude of computing operations used by many 
cryptographic algorithms, which leads to an increase in the 
complexity or a decrease in the speed of the electronic 
circuit* 

* possible design for a cryptography controller, which 
exhibits a high amount of multi-functionality on the one hand 
> and high processing speed on the other hand, consists of a 
combination of a central processing unit and one or several 
coprocessors working in parallel, such as is the case, for 
example, in modern PCs, but also in modern graphic cards, and 
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be ing connected to each other via a bus system. The 
coprocessors take on complicated computing tasks associated 
with, for example, specific cryptography algorithms or 
specific computing operations, such as a modular or 
5 arithmetic multiplication. 

An additional problem that cryptography controllers must face 
is that only a limited energy is available to them. Terminals 
for contact-bearing chip cards provide, for example, a 
10 current of only a few mA as a maximum, whereas the current 
may be limited to an amount even smaller than 10 mA in 
contact-less applications and mobile applications, such as in 
an SIM card in a mobile phone. Consequently, the computing 
speed of the coprocessors is limited by the energy available. 
15 The clock frequency with which the CPU and the 

cryptocoprocessors are clocked is subject to limitations 
imposed by the energy available, since in the implementation 
of the controller chip in CMOS technology, the current 
consumption depends on the clock frequency or on the 
20 switching frequency of the MOSFETs . 

The problems associated with the low energy available and, in 
contact-less and mobile applications, even varying or 
decreasing amounts of energy available are dealt with, in 
25 conventional cryptography controllers, only in that same are 
designed for a certain minimum energy supply- The entxre 
cryptography controller, i.e., the CPU and the 
cryptocoprocessors, are clocked, with fixed clock 
frequencies, such that the energy required for the clock 
30 frequencies set corresponds to the minimum energy. 

Consequently, operation of the circuit is possible only if 
the energy available is sufficient, i.e., is equal to or 
larger than the minimum energy. Due to the fixed clocking of 
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«b. coprocessors, the energy required for operating the 
cryptography controller is also independent of the 
cryptography controller tasK, so that, for example, as r»uch 
energy is required for complicated RSA cryptography 
applications as for less complicated calculations based on 
elliptic curves. In the event that the energy available 
exceeds the energy required for operating the cryptography 
controller, the additional energy available is lost and 
remains unused- 

For chip card and security-IC manufacturers, cryptography 
controllers with a better energy utilization would be of 
enormous significance since hereby, on the one hand, the 
computing speed and, thus, the waiting times at the terminals 
and the user friendliness could be increased and, on the 
other hand, the circuit complexity and, thus, the cost of the 
controller could be reduced at the same computing speed, 
which is advantageous in particular with mass products. 

20 

SUMMARY OF THE INVENTION 

It is the object of the present invention to provide an 
electronic circuit and a method for controlling an electronic 
25 circuit so that the computing power is increased with the 
same energy available. 

in accordance with a first aspect, the present invention 
provides an electronic circuit including a controller for 
30 processing a processor task as well as an energy 

determination means for determining the energy available to 
the controller. A control means of the electronic circuit 
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controls the controller a, a function of, or Spending on, 
the energy available to the controller. 

m accordance with a second aspect, the present invention 
provides a method for controlling an electronic circuit 
Lin, a controller for processing a processor task includes 
determining the energy available to the controller as well as 
controlling the controller as a function of the energy 
available to the controller. 
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The present invention is based on the findings that by 
determining the energy available to the controller, such as, 
for example, a cryptography controller, an optimization of 
the computing time of an operation may be achieved in that 
15 the energy determined is distributed in an optimum manner to 
the decisive coprocessors, i.e., those which are primarily 
required for a current processor task, or other peripheral 
devices or the CPO of the controller. Even though an energy 
determination means or an ergometer is added to the 
20 electronic circuit for this purpose, whereby the complexity 
of saa» is increased, an improvement of the computing power 
at a constant circuit complexity, on the one hand, and a 
reduced circuit complexity at a constant computing power, on 
the other hand, may be achieved by an optimum utilization of 
25 the energy. 

in accordance with one embodiment, controlling the controller 
is carried out as a function of the energy available to the 
controller in that the controller clock with which the 
30 controller is operated is increased if more energy is 

available, and is reduced if less energy is available. To put 
it another way, the controller clock is tracked in accordance 
with the energy determined to be available so as to achieve 
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an optimum utilization of the energy available. This is 
an optim ttarticular , in using the electronic circuit 

advantageous, in partxcular, my . ... 

in chip cards provided for use in contact-less terminals 
since, in this case, the energy available depends on the 
distance between the chip card and the contact-less terminal 
and is, thus, subject to strong variations. In the case of a 
chip card, the waiting time at the terminal is reduced for 
the chip card owner due to the optimum energy utilisation, 
which increases the user friendliness of the chip card. 

in accordance with a further embodiment, the controller 
includes a plurality of peripheral devices for performing 
associated tasks, such as, for example, a UART module (UART = 
universal asynchronous receiver-transmitter) for a data 
exchange with a terminal, a sensor element for checking 
parameters critical in terms of security, a random number 
generator, a filter or coprocessors for performing computing 
tasks, such as a DBS, RSA or hash module, and a CPU for 
driving the plurality of peripheral devices, the controller 
being controlled as a function of the processor task, the 
associated tasks and the energy available to the controller. 
The control may be effected such that, on the one hand, the 
computing time required for performing the processor task rs 
minimized, and, in addition, the energy available is 
> sufficient. This can be achieved in that the energy 

determined to be available is always used mainly for that 
peripheral device or that coprocessor which requires the most 
energy, or computing power, in the application or the 
processor task, such as an encryption, a decryption, 
authentication or signature in accordance with the DES 
standard, the AES method, the RSA algorithm or the elliptic- 
curve method, but also in data transmission. In other words, 
the controller is controlled such that, on the one hand, the 
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energy available is sufficient for processing the processor 

the controller, ana chat, on the otner hand a 
maximu » energy 1. assigned to the respective perxpher*! 
device ox the respective coprocessor for performing the 
computing task. 

in one embodiment, for example, the energy available is 
distributed among a peripheral device and a CPU of the 
controller for example by clocking the CPU low, or slowly, 
and by clocking the peripheral device, i.e., the coprocessor 
responsible for modular multiplications, high, or fast, due 
to the small amount of work to be performed by the CPU during 
an RSA encryption. In another embodiment, in turn, the energy 
available is distributed mainly among two peripheral devxces 
L5 by clocking high, during an elliptic-curve encryption, for 
example, the coprocessor mainly provided therefore, and 
clocking low a coprocessor required for secondary 
computations. In all, there is thus a reduction in the 
computing time required with optimum energy utilization, or 
20 exploitation. 

Further preferred embodiments and variations of the present 
invention are apparent from the enclosed claims. 



25 

BRIEF DESCRIPTION OF THE DRAWINGS 

in the following, preferred embodiments of the present 
invention will be explained in more detail with reference to 
30 the enclosed drawings, in which: 
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Fig- 1 



Fig. 2 



Fig. 3 



energy control of an electronic circuit and its 
advantages will be explained; 

shows a block diagram depicting an electronic 
circuit in accordance with an embodiment cf the 
present invention; 

shows a block diagram of a PLL used for clock 
control in the electronic circuit of Fig. 2; and 



Fig. 4 shows a schematic drawing illustrating the 

dependence of the clock frequency with which a 
peripheral device relevant to the current processor 
task may be clocked on the distance from a contact- 
less terminal in the event that the electronic 
circuit is arranged on a chip card. 
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DESCRIPTION OF PREFERRED EMBODIMENTS 

Firstly, the inventive energy control and the advantages 
resulting from it will be described with reference to Fig. 1- 
With reference to Figs- 2 and 3, an embodiment of an 
electronic circuit in accordance with the present invention 
will then be described. With reference to Fig. 4, the 
application of the inventive energy control will finally be 
illustrated in the case of contact-less applications. 

Even though the present invention may be applied to all 
electronic circuits comprising a controller for processing a 
processor task, the following description particularly 
relates to the field of cryptography, the controller in the 
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blowing sometimes ^ " fe " Sd - 85 ° W TSL t « Of 
processor or cryptography controller. However, a transfer 

:u «- - — « 

cards in a laptop, is raadlly possible. 

5 As is shown in the flow chart of Fig. 1. the inventive energy 
control starts in a step 10 with determining the energy I 
available to the electronic circuit. The energy E avaHable 
My vary for different reasons. If the electronic cxrcuxt is 
10 used in chip cards for contact terminals, the energy 
available may vary, for example, from one terminal to 
another, or may vary due to variations in the quality of the 
contact between the contact terminal and the electronic 
circuit, in contact-less applications, the energy E available 
15 depends on the distance between a contact-less terminal 

interface of the chip card and the contact-less terminal, as 
will be explained in more detail with reference to Fig. 4. In 
mobile applications, such as mobile phones, laptops or the 
like, the energy available may decrease due to the increasing 
20 discharge of the battery. The determination itself may be 
effected in different ways or by means of various devices, 
wherein different parameters may be used as a measure for the 
energy available, such as an input voltage or a coupled-xn 
current - 

in a step 20, the controller of the electronic circuit is 
then controlled as a function of the energy E available, 
which was determined in step 10. As is represented by a brace 
in Fig. 1, the controller may be controlled in various ways 
30 as a function of the energy E, three possibilities 20a, 20b 

and 20c being shown in Fig. 1 in a merely exemplary manner, h 
first possibility 20a of controlling the controller is to set 
the clock frequency of the controller as a function of the 
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energy > available. By changing the clock frequency, the 
LtcLng frequency of the switching events formrn, , the 
controller is changed, which results in e change n the 
current consumption or the power consumption xf the 
5 controller is implemented in CMOS technology, for example 
„, as a consequence, less energy is available, the clock 
rreguency must he set lower, whereas the clock freguency and 
thus the computing speed may he increased if more energy xs 
evailable. In the event that the controller consists of 
10 several components, the clock freguency may be set 
individually for each component, such as a CPU or a 
peripheral device, such as a coprocessor, as will be 
Lplained in more detail with reference to Fig. 2- By settxng 
the clock frequencies of the various components, the energy 
l5 evailable may be utilized in an optimum manner or be fully 
distributed to all components required for the current 
processor task. The distribution of the energy available to 
the various components by setting the various clock 
frequencies may be effected for the purposes of optimizing 
20 the computing time of the processor task, whereby the 

computing time is minimized due to the maximum utilization of 
the energy available as well as the simultaneous optimum 
distribution of the energy to the individual components. 

25 A second possibility 20b of controlling the controller is to 
switch off controller components not relevant to the current 
processor task. These non-relevant controller components are 
disconnected from the supply voltage, for example, by 
additional switching elements, such as FETs with little 

30 leakage current so as to put same in a sleep mode. 

A further possibility 20c of controlling the controller is to 
set the supply voltage of the entire controller or of 
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~f controller. In the event that 
individual components of the control thresho ld 
the energy available falls short of a specific thresho! 
the energy a value, for 

* thP voltage supply might be set to 
value, the ™ lt *** J P J controller operation 

„*nr,n^nts of the electronic circuit, 
be changed for analog components or tne 

such as for the analog part of a contact-less terminal 
interface of the electronic circuit. 

of energy control described above with 
One main advantage of the energy aw ,, lable 
reference to Fig. 1 is the fact that the energy E available 
i. determined and then used up completely for operating the 
controller, in comparison with conventional electronic 
circuits designed for a specific minimum supply 
this way, that part of the energy available which exceeds the 

• • mBD T V energy may be used for accelerated processing 
minimum supply energy n»y . 1ntlfl1 
of the processor tasK. Whereas, consequently, in conventual 
exectronic circuits, specific peripheral devices decisive in 
determining the overall performance of the system, are 
operated only in fixed specified multiples of a CPU clock, 
and whereas this, however, is possible only if the energy 
available is sufficient for this, individual peripheral 
devices may be clocked faster by means of the inventive 
energy control in the case of surplus energy available, such 
that the energy available is utilized in an optimum manner, 
i.e., essentially totally. 

considering the current processor task, such as carrying out 
a specific cryptography algorithm, the energy which i. 
determined to be available may also be distributed to the 
decisive coprocessors in an optimum manner with a vrew to an 
optimization of the computing time, so that the energy 
available is not only fully used up, but is also utrUsed or 
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usa d in an optimum manner, whereby the costing speed * : the 

ontroller may be increased at a constant energy, and whereby 
controUer may ^ ^ 

the user waiting time at 

With reference to Fig. 2. an electronic circuit in accordance 
with an embodiment of the present invention will be described 
b elow. in accordance with this embodiment, the electronic 
circuit includes a cryptography processor and is arranged on 
a chip card suitable for application in ccntact-less 
terminals- 

As can be seen in Fig. 2, the electronic circuit includes a 
contact-less terminal interface 100 as well as a cryptography 
processor comprised of a CPU 110 as well as a peripheral 
device 120, such as a cryptocoprocessor, an WS generator or 
a 0A R1 module, the peripheral device being assumed to be a 
cryptocoprocessor in the following, to make illustration 
easier The CPU 110 and the cryptocoprocessor 120 each have a 
clock multiplier 130 and 140, respectively, associated with 
them, which output a clock signal, clockCPU and clockcrypto, 
respectively, to the CPU 110 and the cryptocoprocessor 120, 
respectively, it being possible to use clock generators 
instead of clock multipliers. The contact-less terminal 
interface 100 arranged to convert electromagnetic energy 105 
from a contact-less terminal (not shown) to electrical energy 
for supplying the electronic circuit, and consisting, for 
example, of an antenna, a rectifier and a low-pass filter, 
supplies the supply energy to both clock multipliers 130 and 
140 as well as to an ergometer or an energy determination 
0 means 150. The ergometer 150 outputs control signals VCCPU 
and vccrypto to both clock multipliers 130 and 140 as a 
function of the supply energy or the energy available from 
the contact-less terminal interface 100, so as to control the 
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clock frequencies of the clock signals of the clock 
^Pliers 130 an d 140, which clock signals are output to 
the CPU 110 and the coprocessor 120. 

s T he cryptography processor, which consists of the CPU 110 and 

150 is suitable, for example, for 
t-ho crvotocoproeessor lzo, is 5U1 " 

the crypcoc w encryption, a 

processing specific processor tasks, sue a 
decryption, an authentication or a signature based on the DES 
ncld. the M S method, the BSA algorithm or the ellrpt.c- 
0 curve method. The cryptocoprocessor 120, in turn, rs provrded 
for performing a specific computing task, such as a modular 
or arithmetic addition, multiplication, exponentiation or 
inversion, a hash-value calculation. In the case of a 
peripheral device 120, same may be an RNS generator, OART or 
15 sensor, for example. In general, the computing tasks of the 
cryptocoprocessor 120 require far more computation effort 
than the control tasks of the CPD 110 which consist in 
driving the cryptocoprocessor 120 in that the CPU outputs, 
for example, commands, data or other information to the 
20 cryptocoprocessor 120 via a bus (not shown) . 

in order to increase the total computing speed of the 
coprocessor, the electrical energy which the contact-less 
terminal interface 100 gains from the electromagnetic energy 
25 105, is determined by the ergometer 150 and distributed to 
the CPU 110 and the cryptocoprocessor 120 by means of the 
clock multipliers 130 and 140, such that the CPO is supplied 
with as little energy as possible, whereas the 
cryptocoprocessor 120 is supplied with as much energy as 
30 possible, m distributing the energy available to the CPU 110 
and the cryptcooprocessor 120, the fact that changing the 
clock frequencies of the clock signals clockCPO and 
clockcrypto of these components further determines the energy 
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coition of these component, is benefited from in the 
pres ent case. If the cryptography processor is Rented « 
Lo S technology, the energy consumption is dependent for 
example, on the switching frequency of the Individual 
MOSFETs. consequently, full utilization of the energy 
available is achieved by clocking the cryptocoprocessor 120 
as fast as possible, whereby a high computing speed is 
allowed. 

in the embodiment shown in Fig. 2, the clock multipliers 130 
and 140 are designed such that, at the same control signal, 
they output clock signals clockCPU and clockcrypto, the clock 
frequencies of which differ from each other by a fixed 
m ulti P le n. The ergometer 150 converts the supply energy from 
5 the contact-less, terminal interface 100 into equally high 

control signals VCCPU and VCcrypto, so that clockcrypto = n * 
clockCPU. However, it is also possible that the ergometer 150 
outputs different clock signals VCCPU and VCcrypto to the 
clock multipliers 130 and 140. The ergometer 150 is either 
■0 formed as a regulator converting the supply energy received, 
which comes from the contact-less terminal interface 100, 
into suitable voltage signals in a manner determined by a 
circuit design, such as a linear regulator, or includes an 
A/D converter so as to convert the supply energy into digital 
25 control signals VCCPU and VCcrypto. In the case of digital 
control signals, a look-up table may be provided in which 
control signals VCCPU and VCcrypto are stored for specific 
supply energy areas, which control signals VCCPU and VCcrypto 
ensure an optimum computing time of the cryptography 
30 processor for the respective supply energy area. 

The clock multipliers 130 and 140 of Fig. 2 are formed in the 
form of PLLs allowing a clock frequency multiplication of an 
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input frequency by rational multiples n/m. The input 
Jeguency is preset, for example, by a deck signal produced 
Dy the contact-less terminal interface 100. The clock 
multipliers 130 and 140 consequently convert a clock argnal 
" the input frequency fin into a clock signal of the output 
frequency font •»/.««.» block diagram of the clock 
multipliers 130 and 140 is shown in Fig. 3. As can be seen, 
each clock multiplier includes an input IN 200 where the 
clock signal of the input frequency fin is applied, inputs 
INn and INm, where the value of the counter n and of the 
denominator m of the rational multiple is applied between the 
input frequency fin and the output frequency font, and an 
output out, where a clock signal with the clock frequency 
font is output, in addition to a frequency divider 220, the 
circuit includes a HI. consisting of a voltage-controlled 
oscillator VCO 230, a frequency divider 240, an XOR circuit 
250 and a regulator 260. fin input of the frequency drvider 
220 is connected to the input IN 200, and a further input is 
connected to the input INm 210. At an output, the frequency 
divider 220 outputs an output signal of the frequency fin/m, 
the output being connected to an input of the XOR circuit 
250. A further input of the XOR circuit 250 is connected to 
an output of the frequency divider 240, the two inputs of 
which are connected to the input INn 205 and an output of the 
VCO 230, respectively. An input of the VCO 230 is connected 
to an output of the XOR circuit 250 via the regulator 260. 
The output of the VCO 230 is further connected to the output 
OUT 215. 

The mode of operation of the circuit of Fig. 3 will be 
described below. The control inputs IMn and INm, which are 
controlled by the control signals VCCPU and VCcrypto (see 
Fig. 2), may be used for setting the splitting ratios n and m 
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with which the frequency dividers 220 and 240 
(n,m el, 2, 3 >, _ ^ ^ input 

divide the frequences of the input .,,„-„,. ,30 

« »i,^v «ianal of the oscillator 23U. 
200 and of the output clock signal or 

Only if the output signal of the VCO 230 has the output 
5 frequency font- n/m x fO, identical signals with the same 

dock frequency fin/, and phase are applied to both inputs of 
the XOR circuit 250. if this is not the case, the voltage- 
controlled oscillator 230 is readjusted by the XOR circuit 
250 in co-operation with the regulator 260 so as to achieve 
10 the desired splitting ratio between the input clock signal 
and the output clock signal. Consequently, the clock signal 
applied to the output O0I has the desired frequency font. 

After the circuitry as well as the mode of operation of the 
15 electronic circuit of fig. 2 have been described above, the 
advantageous application of same in chip cards for contact- 
less terminals will be illustrated below. 

fig 4 schematically shows a chip card, on which the 
20 electronic circuit of Fig. 2 is arranged, in three positions 
300a, 300b and 300c relative to a contact-less terminal 310 
radiating electromagnetic radiation 320 of a certain 
frequency. As is shown by double arrows in Fig. 4, the 
various positions 300a to 300c are located at different 
25 exemplary distances, i.e. , 10 cm, 7 cm and 5 cm, 

respectively, from the contact-less terminal 310. Srnce the 
energy E available, which is gained from the electromagnetic 
radiation 320 in the contact-less terminal interface (see 
Fig 2) of the electronic circuit, depends on the distance d 
30 of the chip card from the contact-less terminal 310 for the 
electronic circuit, a clock frequency fl, « and f3, 
reapectively, for the controller of the electronic circuit 
„ay be set at the different positions 300a, 300b and 300c, 
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w= >,-irTh^r or lower, depending on 

31 o If the card is further away from the tarsal 310 there 
is less energy available to tha electronic circuit, so that 
13 le .„ ho lousr If the card comes closer 

the clock frequency must be lower. t 

to the terminal 310, there is -ore energy available, so that 
the controller may be clocked with a higher clock frequency, 
in this way, the clock frequency is always adjusted to the 
energy available, so that, if more energy is available, a 
lower amount of computing time is made possible. With 
conventional cryptography chip card solutions, in contrast, a 
fixed energy consumption, such as a fixed clock frequency 
has been preset which corresponds, for example, to a specie 
maximum distance of the chip card from the terminal 310 and 
has been a compromise between a maximum range of distances 
and maximum computing power. Consequently, operation of the 
cryptography processor was possible only within this range, 
any superfluous energy not being converted in the case of 
smaller spacings. 

in order to simplify the description, only that case has been 
described above with reference to Figs. 2 and 4 in whrch a 
cryptography processor consists of a CPU and a periphera 
device or a cryptocoprocessor . In the by far more typical 
cases, however, a cryptography processor will consist of 
several peripheral devices and cryptocoprocessors. In such a 
case, the energy available may be distributed to the 
coprocessors, for example, such that a minimum computing trme 
is achieved with a maximum energy utilization. Thrs » 
j achieved in that, in addition, the current processor task 
and/or the different computing tasks of the coprocessors and 
the associated tasks of remaining peripheral devices are 
taken into account when distributing the energy available, 
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which is determined by the ergometer. to the coprocessor, . and 

=« a -liable will then always be used for 
CPU The energy available wxxx u 
that or'lse coprocessors, that Is/are made tha .oat use of 
In the application or tha procaaaor task, m the case of an 
5 authantication to he affactad, tha «* tooopl0 ~^' 
assigned tha maximum energy possible, for example, whereas 
the CPU and tha remaining coprooeasors are assigned merely 
minimum share of the energy available. Similarly, the energy 
available is distributed by as fast a closing as 
L0 the DES module, for example, in an encryption task and to the 
hash module in the calculation of the hash value, 
coprocessors which are not relevant to the current P«™»« 
task may even be switched off completely or be put rn a sleep 
„*. by disconnecting same from the supply voltage so as to 
15 avoid leakage currents. 

The optimum distribution of the energy available to several 
coprocessors may be achieved in that each coprocessor is 
assigned a clock multiplier, Just as the cryptocoprocessor 
20 120 is assigned the clock multiplier 140 in Fig. 2. In the _ 
simplest case, for example, wherein the coprocessors are 
sequentially used or driven by the CPU in the performance of 
the processor task, the CPU may be operated with the clock 
frequency few. whereas the coprocessors currently not 
25 required in the processor task may be switched off or be 
operated with the frequency fCPU and whereas merely that 
oryptocoprocessor which is currently required in the 
application is clocked with a higher clock frequency which is 
set such that the energy available is used up as fully as 
30 possible, in other words, an optimization of the computing 
apeed and a maximum energy utilization are achreved in that 
the clock frequency of the coprocessor which is currently 
used mainly by the processor task is increased or reduced 
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such that same is clocked with the maximum clock frequency 
possible and that the remaining energy available « 
sufficient for operating the refining necessary components. 

a the case of parallel operation of the cryptocoprocessors, 
the distribution of the energy available to the 
cryptocoprocessors might be carried out by accessing a look- 
up table wherein an optimized set of clock frequencies for 
the cryptocoprocessors is stored for certain areas of the 
energy available and for certain applications supported by 
the cryptography processor, respectively. Each set of clock 
frequencies would distribute the available energy associated 
essentially to those cryptocoprocessors whose associated 
computing tasks are required in the associated application, 
in addition, the clock frequencies within each set are 
determined such that the available energy with which this set 
is associated is essentially fully used up. Since frequently 
several cryptocoprocessors are associated with the same 
application, or perform computing tasks required in the same 
application, these cryptocoprocessors may be clocked with the 
same clock or by a PLL or may always be clocked in fixed 
clock frequency ratios with respect to one another in the 
form of a clock frequency tree, whereby the number of clock 
frequencies to be controlled is reduced. 

Even though it has been described above that clock 
multipliers or PLLs which allow merely rational splitting 
ratios are used for setting the clock of the clock signals 
for the CPU and the cryptocoprocessor (s) , it is also possible 
i to use, instead of same, oscillators which are controllable 
independently of one another, so that further relatively 
prime splitting ratios are possible between the clock 
frequencies of the controller components. The advantage 
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«*-v> th P previously described case of 
the cXoc* MUXt.pU.rs t frequ encies 

^ - • «• ^ lax muXtipies, but may — 

nay not onXy be set to fuixy ra^ 

be aet relatively prime with respeot to each other. 
m a X imiration of energy utiliration is attractive, rn 
; loular, in fields of application wherein - ™ 
avaiXabXe is very Ximited, sue, as is the case xn contact 
le9s and mobiXe applications. The provxsron ox P«^" 
oeoiXXators for aXX or for g roups of cryptoooprocess rs 
however, requires synchronizing the cryptocoprocessors ,n 
o7 s tion since same are ciodced in a manner asynchronous 
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FinaXXy, it shouXo be pointed out that any type of 
controxxers, whether with or without a coprocessor, xs 
possible, even though it has been described above wxth 

' 2 that the controiler of the eXectronxc 

reference to Pig- 2 that tne » „ a , av 
circuit inexudes a C P U and a coprocessor. AppXyxng the energy 
controx mereXy to the entire controXXer resuXts in Most of 
the advantages of the present invention which have been 
described above. 

Mith reference to Fig. 2. it should further be pointed out 
rhat the electronic circuit May both be arranged on a cxrcuxt 
b0 rd and be integrated in a chip. simiXarly, the controXXer 
Z be comprised of individuaX components which are arranged 
on a circuit board or may be integrated in a singXe chxp. 
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. . „„ ha s been described above 
Even though the Preset invent on ^ & _ 

Mi th reference to ^ ^ l9 £ ^ — 

less application, the pr s „ to mobl le 

to appucetions vitb contact * interface of 

Tn this case, tne 
applications, in con tact. 

Fi9 . 2 may be replaced by 

, h at even though it has been 
It shall further be ^^^^^liers are hard-wired in 
described above that the cloct» able to the 

, the electronic circuit the* ^ cloc * 
electronic circuit via pIov ided at the 

nu lti P Uers or --^;;;: c : with the electronic circuit 

— — at the ternlna1 ' 

only upon use 01 

L5 • h , been described in tenns of several 

Mh ile this invention ha alteratloM , permutations 

and eguivalents which fall I ^ ^ ate ma ny 

invention. « *nould also be ^ 
20 alternative ways or i^en-ng ^ ^ th 
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